Volerion logoVolerion
Volerion logoVolerion

GitLab CE/EE Authorization Vulnerability Allowing Deletion of Protected Container Registry Tags

Vulnerability

An authorization vulnerability has been addressed in GitLab CE/EE versions 17.10 prior to 18.9.7, 18.10 prior to 18.10.6, and 18.11 prior to 18.11.3. This vulnerability could have permitted an authenticated user with developer-role permissions to delete protected container registry tags, due to inadequate authorization checks.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of protected container registry tags.

Added: May 14, 2026, 6:54 AM
Updated: May 14, 2026, 6:54 AM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
0.6
exploitability
6.6
remediation
7.7
relevance
8.3
threat
6.4
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.